{"action":"Upgrade usd-core to 25.11 or later.","affected":[{"fixed":"25.11","introduced":"0"}],"component":"usd-core","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["25.11"],"ghsa_id":"GHSA-grjp-54v3-c442","id":"tcs_01M5KFJ6KRE50F93N7GP6RYKWG","modified_at":"2025-10-29T22:31:30.040308Z","published_at":"2025-10-29T22:13:03Z","references":["https://osv.dev/vulnerability/GHSA-grjp-54v3-c442","https://github.com/PixarAnimationStudios/OpenUSD/security/advisories/GHSA-grjp-54v3-c442","https://github.com/PixarAnimationStudios/OpenUSD/commit/b9530922b6a8ea72cd43661226b693fff8abbe4c","https://github.com/PixarAnimationStudios/OpenUSD"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-grjp-54v3-c442","url":"https://osv.dev/vulnerability/GHSA-grjp-54v3-c442"}],"summary":"OpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability"}